Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/IVwFt4zYyGaF0JdkPYzVaaHHM4s.roa
File: IVwFt4zYyGaF0JdkPYzVaaHHM4s.roa (raw, json)
Hash identifier: ZvMKn7AcrmUe/e+Ap5QVIJ80TV+lal6h8zWSEXrWicM=
Subject key identifier: 21:5C:05:B7:8C:D8:C8:66:85:D0:97:64:3D:8C:D5:69:A1:C7:33:8B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D86
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IVwFt4zYyGaF0JdkPYzVaaHHM4s.roa
Signing time: Wed 08 May 2024 16:54:25 +0000
ROA not before: Wed 08 May 2024 16:54:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7558 (0x1d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 16:54:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=215C05B78CD8C86685D097643D8CD569A1C7338B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:45:48:25:55:89:f0:1c:a7:ae:a3:ef:11:
67:ac:05:6e:60:93:a7:cb:0e:a5:72:23:a2:3d:54:
35:90:23:01:2a:45:a7:0d:59:6b:2f:26:ba:2f:13:
35:6e:77:3a:1f:0e:3a:04:7a:cf:dc:bc:30:39:8e:
15:4e:35:45:78:52:47:8a:05:3a:53:eb:e9:02:ca:
bf:b1:02:2c:f8:1b:f9:d8:cb:64:e3:a3:70:96:0a:
dd:9f:dd:bf:45:b1:7a:d4:1b:0a:05:29:15:75:cc:
06:87:97:87:a0:48:e9:ac:44:0a:66:c9:f0:51:a1:
d5:9d:84:9e:aa:27:a1:d0:5f:f2:d7:2b:fb:26:35:
32:06:af:d8:86:f2:61:ef:5b:dd:83:7d:29:a9:e5:
9d:2a:f8:e4:5d:b4:8f:3a:fb:f2:04:3a:4f:da:de:
f7:c5:92:4c:29:ae:b2:50:c7:fd:d4:46:9d:f2:39:
ca:12:61:ba:cf:17:55:9d:4b:bc:3b:46:76:30:6c:
59:a3:81:9e:5c:a8:69:50:b9:81:90:62:3f:b6:66:
15:0b:44:a4:97:c0:fe:ca:d6:f5:89:37:7e:84:a4:
04:9e:a5:a5:f3:73:7f:c8:68:70:cf:74:d9:85:18:
91:7c:d2:bd:b0:cd:4a:19:16:a0:a0:f6:7d:35:87:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:05:B7:8C:D8:C8:66:85:D0:97:64:3D:8C:D5:69:A1:C7:33:8B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IVwFt4zYyGaF0JdkPYzVaaHHM4s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:25:3d:6a:b6:41:e7:60:0d:66:00:09:d5:83:7f:61:5f:d7:
52:48:de:69:c7:11:b2:06:57:17:fb:c0:81:ef:59:c0:20:90:
e2:12:e3:73:89:b4:bc:f6:5d:6c:41:98:db:14:07:53:98:e4:
80:b6:48:b7:df:ce:3b:f0:22:b8:8d:78:06:b3:81:37:b2:d8:
41:e0:a4:ee:8f:af:5d:dd:a5:d1:ea:d5:df:1b:ce:69:d9:11:
b6:61:35:46:b1:6c:dc:59:40:78:75:63:37:5e:c9:ea:19:4c:
9b:d6:16:02:e4:a8:95:62:72:29:74:9f:02:ea:79:a4:52:5a:
43:d4:1e:b8:6a:9b:21:ee:9f:ad:8a:2d:7b:a9:e4:ba:7f:7b:
32:db:04:0a:9a:f5:2b:9d:53:85:a0:d6:1f:9b:4c:3d:6c:54:
84:ae:e5:df:f5:97:a8:86:6e:93:de:54:55:d2:01:aa:b9:36:
58:66:79:b4:dc:7e:2a:8d:c5:cf:1f:eb:af:4f:8e:8d:95:e8:
95:13:f4:62:40:ec:3d:2c:ee:e7:f4:39:be:ff:7e:d2:99:64:
0e:85:9b:26:6c:73:e3:36:7e:91:2b:86:58:55:e9:b3:5a:83:
fa:37:55:73:ce:85:f2:e1:91:ec:19:e8:5a:f4:62:7e:18:3b:
3d:2d:72:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:41:07 2025 by rpki-client